OT Security Engineer | Critical Infrastructure Protection | NERC CIP Compliance
Trans Bay Cable (Energy Infrastructure Subsidiary of NextEra Energy)
- Integrated and enforced Purdue Model network segmentation protecting OT/ICS assets, reducing lateral movement risk between operational and corporate environments.
- Deployed and administered Check Point firewalls managing 250+ rules and RBAC policies to enforce segmentation aligned with NERC CIP requirements across IT/OT environments.
- Maintained NERC CIP aligned firewall rule governance by documenting justification, validating service necessity, and supporting audit evidence requests.
- Supported implementation of Dragos to enhance OT specific threat detection within segmented control and DMZ networks.
- Hardened ICS Active Directory environment by enforcing least-privilege policies and restricting administrative access to critical control systems.
- Established centralized monitoring across OT assets utilizing PRTG to improve operational visibility and enable early anomaly detection within segmented control networks.
- Designed secure remote execution pathway between segmented networks using Just Enough Administration (JEA) for PowerShell, enabling controlled cross-boundary operations without violating segmentation policies.
- Investigated and triaged SIEM alerts in Tripwire Log Center by correlating firewall, endpoint, and system logs, assessing severity and operational impact to validate or dismiss potential security threats.
- Implemented automated and secure configuration backups for Check Point firewalls using SCP with key-based authentication to ensure configuration integrity and rapid recovery capability.
- Deployed Trend Micro Apex One agents across ICS and DMZ networks, enhancing endpoint visibility and malware protection within segmented OT environments.
- Led consolidation and reorganization of 10+ server racks housing 200+ assets, upgrading power circuits from 20A to 30A to increase load capacity, improve distribution efficiency, and support future infrastructure growth.
- Led procurement and implementation of centralized cyber asset inventory system to improve asset traceability and support compliance and management initiatives.